This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129394179/0/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.mft
File:                     134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.mft (raw, json)
Hash identifier:          wGzdP0gMhb31Btew71nNSQPl1Rm+osUdEBrGF9eRfuQ=
Subject key identifier:   7F:35:C0:30:A3:2B:B9:F2:2F:EC:E6:D5:7F:DF:59:D8:A5:51:53:7C
Authority key identifier: 13:4A:C3:67:4D:05:C4:DD:EB:3F:BE:E5:E9:6B:93:EA:8D:37:C5:1E
Certificate issuer:       /CN=134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E
Certificate serial:       3F5929884AB491EFA0C1CF504257E04413D6369A
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/0/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.mft
Manifest number:          09
Signing time:             Sun 25 Jan 2026 06:05:57 +0000
Manifest this update:     Sun 25 Jan 2026 06:00:57 +0000
Manifest next update:     Mon 26 Jan 2026 09:44:57 +0000
Files and hashes:         1: 134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.crl (hash: 7KymBotenAhW+5+jRWdRbLC1gYU7kL48y7xI8QJXsv0=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/0/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/0/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Jan 2026 09:44:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:59:29:88:4a:b4:91:ef:a0:c1:cf:50:42:57:e0:44:13:d6:36:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E
        Validity
            Not Before: Jan 25 06:00:57 2026 GMT
            Not After : Jan 26 09:44:57 2026 GMT
        Subject: CN=7F35C030A32BB9F22FECE6D57FDF59D8A551537C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:aa:c6:d7:a8:e9:8a:f7:5f:ce:85:c8:87:e1:
                    b9:23:85:c4:5c:84:b8:36:52:8c:f9:c7:d4:40:85:
                    b5:06:94:5e:6d:4c:18:8c:be:54:b0:d1:42:de:8d:
                    25:1a:b6:25:40:97:f5:7b:1a:7f:89:7d:6b:74:ae:
                    1f:38:87:50:e0:d6:a2:cf:1e:2d:e0:b3:57:b2:d2:
                    f3:fe:b6:89:7e:0d:93:8c:79:e8:52:76:d7:db:f5:
                    f7:49:02:07:21:3b:81:0b:9a:75:84:6f:c3:77:4d:
                    0c:eb:96:ae:85:57:ca:98:2e:22:da:50:04:29:9c:
                    05:af:f5:f1:b2:b7:ed:81:0d:ad:87:d0:6f:ac:c4:
                    ec:77:41:db:e9:a9:59:30:b7:7d:69:d7:a9:10:79:
                    b2:6e:2f:e2:81:f9:dc:f2:6a:e6:58:7e:73:36:17:
                    3a:dc:e2:7c:62:ff:23:43:a7:39:50:aa:8e:a5:c0:
                    2d:cd:be:6a:8e:9e:fc:9c:a2:f7:aa:db:ca:8c:b0:
                    e7:e0:a2:d0:e4:ee:07:1d:0c:a6:c2:18:0a:23:41:
                    d7:5a:34:ca:a3:1e:90:b9:66:a2:53:d6:aa:eb:40:
                    6c:9f:ba:85:1f:3a:f1:55:52:9d:83:d6:1d:ab:13:
                    bb:62:d6:4d:ef:21:51:be:a5:86:36:a0:07:0a:56:
                    4b:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:35:C0:30:A3:2B:B9:F2:2F:EC:E6:D5:7F:DF:59:D8:A5:51:53:7C
            X509v3 Authority Key Identifier:
                keyid:13:4A:C3:67:4D:05:C4:DD:EB:3F:BE:E5:E9:6B:93:EA:8D:37:C5:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/0/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/0/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:3c:79:59:b3:b4:ca:47:3d:a1:68:a1:9a:f3:be:3b:55:14:
         39:fa:25:ee:32:e8:22:93:49:ae:3d:11:44:5b:98:ab:ef:9c:
         f1:b7:3a:7b:85:22:c8:dd:4f:b5:8c:31:c3:71:7f:05:42:e1:
         4e:fb:88:9b:b7:64:b0:a3:a3:79:24:c3:2c:ee:e8:24:32:16:
         66:e5:5a:da:f0:4a:86:20:76:39:81:b6:85:9c:da:2c:86:87:
         fe:45:8e:37:44:50:b9:a5:b3:5f:fb:33:c1:76:4e:6a:64:06:
         fa:b4:b0:45:a6:08:9d:41:2b:e8:a9:4e:ac:9b:af:ad:b7:07:
         72:c8:4b:1c:f8:09:57:3a:7f:b1:e1:75:fa:61:1a:5d:c8:02:
         e3:44:60:5b:7c:46:3a:c7:a1:18:2f:ad:d6:3e:e7:c0:8a:aa:
         24:21:a5:ee:74:ef:e5:a7:70:b7:3e:42:af:6a:eb:13:8d:c7:
         e6:67:bc:30:1d:21:25:9c:87:fb:cd:b1:f7:7f:7f:69:d5:3c:
         f8:72:a6:03:c1:37:52:6c:e6:00:9f:0f:6c:e0:77:1d:37:8d:
         b2:3c:02:f8:7a:3d:b7:3d:1d:3c:ea:65:08:af:71:a3:a0:be:
         62:b4:5a:46:41:2d:52:0b:c7:ab:c0:77:74:e0:14:92:35:52:
         53:36:fe:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 02:02:01 2026 by rpki-client